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‘SORANDUS PCR: Director of Central Intellicence 


SUBJECT : DCTs ill, Security Coumittee 


i. Responding to an IC report on "Intelligence Community 
Security Prebleus," Gated 24 September 1573, and a suggested 
Seeision of DCID 1/11 whieh would expand responsibilities of 
the Security Committee, the DCI on 7 Hevexber 1973 tasked 
the Security Camnittee chairman to prepare a sewsnee Pere 
fli for submission to the USI, 


cs The Security Comaittee prepared suck: a BCID, with | 

ch all committee members concurred, When the Office of 

ebee eS Zoutht CIA coordination, however, the DDI on 14 

ywuary 1978 recommended a "thorough reconsideration of the 

pe ef the reconstituted committee with a view to confining 

$o the traditional security tcnies.*" He also noted some 
"“{nsonsisteney between tha statements of missions and funetions® | 
and indicated he Rad problems with "those pertions of the 
ebarter which deal with coupartmentat ;ion.* 


3. General Graham and Dr. Proctor have sinee discussed 
the problem of expanding Security Committee responsibilities 
ana have no basic differences as to the need to strengthen 
the USIS5 mechanism which supperts the BCI on a wide range of 
aecurity matters and particularly on security policy issues. 
Yhey agreed that the key initial task should be to identify 
an appropriately qualified officers to become the full~time . 
‘chairman ef a reconstituted Security Committee. Such a 
chairman pene have @ backeround whies includes consumer _ 
and antelilsence analyst oniensabson as well as a knowledges 

security “pabters. The Security Comittee would 28 


presentatives of thé Various USis — 


to the reconstituted Security Cosmittee, 
roG level "Exesutive Fanel*® be established 
EIA aret CIA USTIS Benbers or their - 
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regulate @ an encaig ®hisg "Seeeutive Panei* woul provi 
policy guicanuee on the full range of Seaurity issues BE 
partciewuiar, Or: thas eoneerned with ¢ 

Bdge e@lth foreign governments. “Saese individual 

ee ne Rater i eae pepe to ee a gaca cece a € besaice 


der se S22 epee to =a 
zovernaents. 


56 A ist of poasible CIA eandicates for election as 
chairman hae been discussed with Jenn F. Blake, A/OUEZ45, anc 
25X1A-___________] aeting Security Coumittse Chaircan. Jo contact 
has been made with any of the persons listed below pending 
giseussion with you. 


&. If a CIA officer is to be selecteai as fuii- 
tine ehatrdan of the new Security Committee 1t would be 
preferable that he be an officer still on active duty. 
He nanes are propesed since it a considered you will 

be the best judge as to the velative value of baving 
ene of your senior personel | ralieves ef his present 
assignsent to take over the Security Comeittes. 


> If far sowe xveason no ons eSegentiy On board 
4a available, ye ivkt cunsider contract caiploysent of 
If you ¢lects this route, 
recentiy retired CIA officiais 
Bight be recruited to serve as chairman on & two or 
three. says per week basis: 


Layrenese Fou St62 
Willias Brose 


ry 


Sen Bmi% 


6. it 48 suggested that you raise at an early USTS 
meeting tac. ange of selection of & #hairnan for a oe security 
Cormdttee with ressonsibilities considerably expended from 
these of the present eomeltites, and invite ne eninations for 
consideration. 
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re Atteshed is the proposed new OCIS l/iL. whites it ta 
igs the officer selected to chair the Security 


Pasken to review from the standpoint of its 
Luacy bO Support nin in respending to the seeurity policy 
Bnd Otaer security needs ef the USIB and the BCI, and to 

taen subwlt 4: to the USIB fer approval. This graft insindes. 
revision of the mission and funetiona sectiens previously 
approved by tae Security Committee to eliminate what wers 
eocsigered to be isconsistengies, but does not change the 
Substance Of what the Security Committee dreft contained. 

gf. An @ariy opportunity te diseues with yveu the 

appointment of the Sesurity Committee enairgen is requested. 
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25X1A 


5 DEC 1973 


MEMORANDUM FOR: Deputy Director for Intelligence 


SUBJECT - 19 November 1973 Redraft of DCID 1/11 


1, As you recall, eee ready to present a 
draft of DCID 1/11 Security Committee at the pre-USIB meeting of 
7 November 1973. There were some issues of concern_and the result 
was that the Director of Central Intelligence approved 25X1 
recommendation that the paper be taken off the 8 November 1973 U 


agenda and remanded to the Security Committee for review and resub- 
mission to USIB. 


2. The Security Committee considered the first draft at its 
November meeting and observed that there was further work to be 
done on it. The Director of Security, CIA, was tasked with preparing 
a revision. He in turn gave ittome. The revision is attached with 
a date of 19 November 1973. On 30 November, the Director of Security 
approved my recommendation that we disseminate this version to thoke 
in the Agency who commented on the first draft before taking it back to 


the Security Committee. 


3, Ihave already been in touch with eel He sug- 25X1A 
gested shortening the statement of missions and noted that this revision 
introduces specific mention of releases of intelligence to foreign govern- 
ments and review of compartmented procedures. 


4, In order to keep the DCID 1/11 at least as short as it is but 
at the same time to try to accommodate the widely held opinion that the 
DCID 1/11 should provide more specific statements on the TSCC, com- 
puter security and compartmentation matters, it is considered that we 


should make these additional statements as attachments to the basic ¢ oye 
DCID 1/11. aie 


20X1 
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5. Your comments on the 19 November 1973 revision and the 
ideas in paragraph four above would be appreciated. 
Bdrm NSP A Pr 


25X1A 
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DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO, 1/11 
(Attachment 2) 
Computer Security 


The functions of the Security Committee include: 


(1) To review, formulate and recommend to 
the DCI policies, standards, and procedures to protect 
intelligence data stored or processed by computer. 


(2) To advise and assist the DCI, the Intel- 
ligence Community Staff, Committees of the United States 
Intelligence Board, USIB member agencies and departments, 
and other intelligence users with respect to all computer 
security issues and to resolve conflicts that may arise in 
connection therewith. 


(3) To formulate and recommend to the DCI 
resource programming objectives for USIB departments 
and agencies in the field of computer security in considera- 
tion of current and foreseen vulnerabilities and threats and 
with regard for the effective and efficient use of resources; 
to foster and to monitor an aggressive program of computer 
security research and development in the Intelligence Com- 
munity in order to avoid unwarranted duplication and to 
assure the pursuit of an effective effort at resolving tech- 
nical problems associated with the protection of computer 
operations. 


(4) To coordinate all aspects of Intelligence 
Community efforts in defense against hostile penetration 
of Community computer systems and as feasible to support 
other Government and national efforts aimed at improving 
computer security technology; to foster a coordinated 
program of Intelligence Community computer security 
training and indoctrination, 
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Attachment 2 


(5) To facilitate within the Intelligence Com- 
munity the exchange of information relating to computer 
security threats, vulnerabilities, and countermeasures 
by providing a focal point for the evaluation of foreign 
intentions and capabilities to exploit Community computer 
operations, for central notification of hostile exploitation 
attempts, for the preparation of damage assessments of 
incidents of foreign exploitation of intelligence computer 
operations, and for the formulation of Community policy 
on the release of computer security information to foreign 
governments and international organizations. 


(6) To review, formulate and recommend mini- 
mum computer security standards, procedures and criteria 
as guidance for system design, evaluation and certification 
of acceptable levels of security for computer systems. 
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